Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 242)

242 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide

a. To allow the VPN tunnel to switch back to the primary host when it becomes available again, select Enabled

from the Preemption drop-down list. This step is optional.

b. If Preemption is enabled, specify a value in seconds for Hold time. When preemption is enabled and the

primary host comes up, the VPNtunnel switches to the primary host after the specified hold time. The default

value for Hold time is 600 seconds.

c. To allow the OAW-IAP to create a backup VPN tunnel to the Switch along with the primary tunnel, and

maintain both the primary and backup tunnels separately, select Enabled or Disabled from the Fast failover

drop-down list. If the primary tunnel fails, the OAW-IAP can switch the data stream to the backup tunnel. This

reduces the total failover time to less than one minute.

d. To disconnect all wired and wireless users when the system switches during VPNtunnel transition from

primary to backup and backup to primary, set Reconnect user on failover to Enabled.

e. To configure an interval for which wired and wireless users are disconnected during a VPN tunnel switch,

specify a value in seconds for Reconnect time on failover within the range of 30—900 seconds. By default,

the reconnection duration is set to 60 seconds.

f. Specify a value in seconds for Secs between test packets. Based on the configured frequency, the OAW-

IAP can verify if an active VPN connection is available. The default value is 5 seconds, which means that the

OAW-IAP will send one packet to the controller at every 5 seconds.

g. Enter a value for Max allowed test packet loss, to define a number for lost packets, after which the OAW-

IAP can determine that the VPNconnection is unavailable. The default value is 2.

h. Select Enabled or Disabled from the Per-AP tunnel drop-down list. The administrator can enable this option

to create a GRE tunnel from each OAW-IAP to the VPN/GRE Endpoint rather than the tunnels created just

from the master OAW-IAP. When enabled, the traffic to the corporate network is sent through a Layer-2 GRE

tunnel from the OAW-IAP itself and need not be forwarded through the master OAW-IAP.

Figure 80 Alcatel-Lucent GRE Configuration

6. Click Next to continue.

1 2 ... 237 238 239 240 241 242 243 244 245 246 247 ... 334 335

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 242